uditkumar-99[.]github[.]io

This domain, uditkumar-99.github.io, is flagged as a high-risk generic phishing resource leveraging GitHub Pages infrastructure to deceive targets. Analysis indicates the campaign does not explicitly impersonate a single brand but instead exploits the trust associated with GitHub's hosting service to distribute malicious content. No specific drainer kit signatures have been identified at this time, though the domain's structure suggests potential credential harvesting or malware distribution objectives. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 185.199.108.153, registered under GitHub, Inc. as both registrar and hosting provider. The domain was created on April 14, 2026, and currently holds a VirusTotal detection score of 17/95 security vendors. It appears on one security blocklist, with no current listings in Google Safe Browsing. The SSL certificate is issued by Let's Encrypt (R12), providing a superficial layer of legitimacy while the page title displays 'Site not found · GitHub Pages,' likely as a misdirection tactic. As of this report, the domain remains active and continues to pose a significant risk to users. While the page currently displays a benign error message, the underlying infrastructure may be repurposed for phishing attacks at any time. Organizations are advised to block the domain and associated IP address at the network level. Users should exercise caution with any GitHub Pages subdomains exhibiting unusual patterns or unexpected content, particularly those created recently or with non-standard naming conventions. Continuous monitoring of this infrastructure is recommended due to its persistent active status and potential for rapid redeployment.